
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer
File: d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.cer (raw, json)
Hash identifier: JIIYOS39Nl6GWm43QLA6L+CjhyjILKEMrcLaEVNvsNU=
Subject key identifier: D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial: 010D0C9F4328584D5F7810BE2421D3DD01808F40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Thu 02 Apr 2026 12:45:17 +0000
Certificate not after: Wed 05 Jul 2028 12:45:17 +0000
Subordinate resources: AS: 54262
IP: 66.51.104.0/22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5f:78:10:be:24:21:d3:dd:01:80:8f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Validity
Not Before: Apr 2 12:45:17 2026 GMT
Not After : Jul 5 12:45:17 2028 GMT
Subject: CN=d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:7c:e0:e3:f7:fa:84:dc:25:96:d3:12:bd:
dd:cc:6b:1f:d3:00:8a:29:44:9e:10:8a:63:dd:5c:
a0:5c:f4:b8:13:66:b9:25:14:2b:98:3f:8b:a4:32:
0e:a1:bc:3a:f9:5d:48:6c:f1:71:7e:54:34:d2:43:
2b:f6:ef:5d:f6:e8:aa:d1:40:ff:d3:56:09:30:c3:
b1:2c:7f:f9:4d:79:a5:53:2b:97:9f:eb:86:5e:0c:
a7:1f:06:3f:7a:11:5a:20:f0:03:b1:9a:67:bd:2b:
be:6a:76:8e:10:01:db:dd:cb:38:a4:cf:20:f4:ba:
84:1e:70:f1:77:e0:d7:6d:14:c4:7f:0f:4b:53:cd:
6c:40:bc:4f:8a:26:17:01:f8:47:22:a6:e0:3d:90:
21:c2:58:f6:df:38:d4:27:f3:02:4a:b7:13:79:a1:
e5:4c:37:8a:e8:59:b1:ff:3b:d1:15:65:c7:bf:4b:
f9:66:0a:4c:5e:be:17:84:ad:b5:d2:e9:e1:21:bb:
89:b3:0d:b0:26:ba:8e:2b:1c:ff:e4:af:6a:02:12:
d2:91:fa:6a:4a:c6:f8:cd:4c:f3:b6:d8:bc:93:08:
ad:fb:11:b0:d6:56:ab:11:c8:98:e8:db:51:00:56:
20:8a:8a:6e:3b:61:72:9f:5e:3f:d9:ba:b6:10:1c:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:D6:84:CF:9B:0F:9D:A2:98:A1:1D:98:99:61:FE:BB:ED:5D:10
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb/d9ec2302-c9e7-49d8-8fc8-da2721ffe2bb.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
X509v3 Authority Key Identifier:
keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.51.104.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
54262
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:7a:90:ad:45:39:a7:bd:75:c7:15:d6:bc:b4:f4:78:d1:e5:
1a:0b:6f:4b:11:fd:12:fc:8c:2a:e8:e9:27:40:c7:0d:94:d4:
48:67:b7:c1:b1:da:7d:1b:a5:d6:06:8e:74:90:41:f0:16:3b:
4d:8f:3d:1e:91:f9:46:d7:8a:cb:e0:b7:e4:8c:76:6a:27:c1:
15:f9:dc:b4:ba:be:ec:f8:dc:b6:2c:b3:3f:f1:df:b3:91:05:
b1:e7:19:40:48:f8:79:be:8b:c4:b3:63:a2:0d:df:2e:3c:30:
6a:b5:93:31:3d:4c:91:58:88:29:9b:ef:80:d3:bc:64:79:2b:
53:8e:3b:c2:db:d7:05:c1:44:5a:38:6f:e1:66:99:c9:46:0c:
c1:a9:db:77:51:67:f1:71:ad:60:f3:79:19:37:43:99:5c:54:
47:58:dc:78:a3:0e:53:89:4f:3a:6e:49:5b:36:fd:6f:1a:2c:
e0:d1:7e:aa:93:b4:78:ca:9a:08:4f:c2:d0:b6:e9:52:72:69:
4e:1a:9d:6a:0f:92:9c:4b:95:ba:4d:e9:d5:46:10:23:27:c1:
e2:9f:1f:99:99:93:22:e6:f1:ea:c5:27:e9:b1:89:b1:e9:27:
1b:4f:1a:a6:ff:54:16:e5:fc:c0:a4:cc:f6:eb:e4:94:b0:50:
61:c4:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:16:57 2026 by rpki-client